CVE-2004-1158
Fixed in a distro release EPSS 3%
Konqueror 3.x up to 3.2.2-6, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window or tab whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability.
Products: kde konqueror, mandrakesoft mandrake_linux, redhat fedora_core
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 3 | kdebase | 6:3.1.3-5.8 |
| Red Hat Enterprise Linux 3 | kdebase-debuginfo | 6:3.1.3-5.8 |
| Red Hat Enterprise Linux 3 | kdebase-devel | 6:3.1.3-5.8 |
| Red Hat Enterprise Linux 3 | kdelibs | 6:3.1.3-6.9 |
| Red Hat Enterprise Linux 3 | kdelibs-debuginfo | 6:3.1.3-6.9 |
| Red Hat Enterprise Linux 3 | kdelibs-devel | 6:3.1.3-6.9 |